According to SplashData, the over five million leaked passwords evaluated for the 2017 list were mostly held by users in North America and Western Europe. Passwords leaked from hacks of adult websites and from the Yahoo email breach were not included in this report.